[Maximum of 100 ips are allowed]
Bulk IP Geolocation Lookup returns geographic and network metadata for a list of IP addresses in a single request — delivering country, region, city, ISP, ASN, timezone, and proxy/VPN detection flags for each IP simultaneously. Where single IP Geolocation Lookup handles one IP at a time, Bulk IP Geolocation is built for the scale that real security, fraud, and analytics pipelines demand.
E-commerce and financial services fraud prevention teams enrich transaction records, login events, and account registrations with geolocation data at scale. By running daily or real-time bulk ip geolocation against observed IPs, fraud models gain the geographic context needed to detect impossible travel, region-mismatched transactions, and VPN-masked fraud attempts. VPN and proxy flags are returned per-IP to support these risk signals.
Security teams enriching web server access logs, firewall logs, or SIEM events with IP geolocation data need to process millions of IPs efficiently. The Bulk IP Geolocation API handles high-throughput batch requests, returning structured JSON results that integrate directly into log enrichment pipelines, Elastic, Splunk, and other SIEM platforms. Pair with Bulk IP Security Lookup for threat context alongside geographic context.
Organizations enforcing geographic access restrictions — OFAC sanctions, data residency requirements, regional content licensing — use Bulk IP Geolocation to enrich access logs and screen for connections from restricted regions. Automated blocklist generation based on country-level geolocation of observed IPs is a common compliance enforcement pattern.
Marketing analytics platforms use bulk IP geolocation to enrich visitor data — attributing traffic sources to countries and regions, validating geographic campaign targeting, and understanding the geographic distribution of user bases. Bulk processing of log-scale IP data requires the throughput that WhoisFreaks' Bulk IP Geolocation API provides.
For log enrichment at very high scale, consider pre-fetching geolocation for your known frequent IP addresses and caching results. Most enterprise environments see 80%+ of traffic from a relatively small set of repeat IPs — caching dramatically reduces API call volume.
